Unverified50% confidenceFactExact time
CVSS is a widely adopted industry framework for quantifying vulnerability severity, maintained by the FIRST organization, with scores ranging from 0 to 10, and a score of 9.2 falls in the "critical" level.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
When the NSA Gets Involved: The AI Supply Chain Crisis Behind Open-Source CVEs and API Key Hijacking
youtubeTheo - t3․gg10/22/2026
Related Entities
Related Claims
VerifiedUnder the CVSS scoring standard, scores of 7.0–8.9 are classified as high severity and 9.0–10.0 as critical, and the standard is maintained by the FIRST organization.79% similarUnverified此类认证后门漏洞在CVSS 3.x评分体系中通常被评定为9.8分左右的严重等级70% similarVerifiedAfter a vulnerability enters the NVD (National Vulnerability Database), it is assigned a CVSS score (0–10), where the Critical level corresponds to 9.0–10.0.70% similarUnverifiedThe CVSS score of this vulnerability, combined with "scope change," means its impact breaks out of the security boundary of the affected component itself and causes high impact on confidentiality, integrity, and availability.64% similarUnverifiedA vulnerability report rich in context is far more valuable than CVE numbers output by scanners, because it explains why something breaks and how to fundamentally prevent it.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1087339API
curl https://kongchang.com/api/v1/knowledge/claims/1087339MCP
get_claim(id=1087339)